A maximum severity vulnerability, dubbed 'React2Shell', in the React Server Components (RSC) 'Flight' protocol allows remote code execution without authentication in React and Next.js applications.
Want more privacy? You can easily hide your house on Google Street View. Just know you won't be able to undo it later.